$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5f14932-08c0-3fce-b2da-92d320bca3be.roa File: c5f14932-08c0-3fce-b2da-92d320bca3be.roa (raw, json) Hash identifier: bcBZmVxWfPWcDCmypW9f8MIqm2083SbU5WeFnDX+73o= Subject key identifier: 8F:19:6A:77:8F:E6:32:54:C1:C8:8B:13:BB:EE:3C:C1:F9:6B:EF:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56B8EB0CC21EDC0EF5180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5f14932-08c0-3fce-b2da-92d320bca3be.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.234.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:6b:8e:b0:cc:21:ed:c0:ef:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1a4ec4c7-f863-4836-8d9a-34f26bd37d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:da:0b:aa:1f:b2:57:6e:c6:ea:d0:f0:19: d7:61:e8:27:b2:60:98:e6:20:97:00:50:86:83:47: fd:cd:7f:79:28:80:cb:18:65:15:9f:ea:ca:64:b3: 6b:b9:a7:d6:56:e9:fb:0b:8a:5e:31:e6:a9:d1:16: ac:c2:92:a8:0f:14:55:ed:5a:16:6c:dd:26:bb:ed: 69:4a:65:12:df:bc:7a:15:ba:f0:80:dd:57:41:b0: 91:ce:c8:74:98:f0:2e:ea:ab:9c:69:19:e1:e4:a5: b9:be:38:d6:f5:82:2f:98:2e:d8:9b:22:f1:f1:f6: 2b:a7:bf:d0:17:57:99:e0:e0:50:1d:a7:47:52:b9: 33:30:4f:89:8d:cc:b4:27:39:ce:ad:e5:84:2f:c7: 37:2b:45:5d:32:f7:e3:7b:59:10:57:57:28:72:58: d7:b0:2d:a3:6f:2c:ec:ae:24:cf:ba:a1:77:95:0e: 02:b0:55:57:b1:b4:aa:f7:64:6d:ce:0c:c3:31:d6: 2d:96:01:5b:0e:cc:84:73:32:46:3c:0d:a9:d5:30: 4f:a4:cc:c5:7c:70:16:d2:0c:2f:d1:80:ed:26:e5: a4:8e:eb:0f:be:59:fd:f9:6c:8c:37:6b:2e:b6:99: ef:f5:cb:b7:4f:78:84:79:0e:ea:47:f3:7a:96:69: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:19:6A:77:8F:E6:32:54:C1:C8:8B:13:BB:EE:3C:C1:F9:6B:EF:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5f14932-08c0-3fce-b2da-92d320bca3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:18:9e:61:ae:ac:af:81:d2:a6:b6:8c:0b:da:8c:b4:91:cc: 8f:bb:0e:c4:b6:5e:a6:fc:cc:ad:57:a8:27:83:e1:3f:64:5d: 2d:f1:3d:86:14:73:2c:31:79:0a:d4:2a:34:6c:3d:9e:55:d9: e4:16:d1:30:2e:28:5d:2a:7d:f2:d5:ca:3e:fb:74:b0:d4:b7: 8d:91:88:5c:fa:a3:ca:a2:0f:4e:77:6c:77:39:05:f4:62:0e: b7:fd:8c:51:02:a0:c8:a2:78:29:a1:3a:3f:6d:c5:ae:df:d9: 34:30:59:18:47:5c:b7:b5:2f:e3:f2:1f:1e:b8:8b:7b:0f:03: 6e:80:86:8e:4c:53:d2:ab:3d:bf:0b:c0:9f:de:14:8c:30:b1: 41:d0:43:2e:dd:d5:24:86:e9:79:02:e2:6b:4c:c7:1b:12:b8: 68:7f:7e:3e:5a:23:a8:a0:3e:6a:d0:45:66:76:9a:d7:8a:14: 18:4a:3b:30:10:89:ab:1a:62:34:08:d9:a1:99:21:6a:1e:c6: 81:53:e6:a0:2b:29:df:db:dd:6d:78:b4:94:b8:54:ea:ae:5a: 43:aa:3d:82:77:ba:6f:f8:f6:a0:27:b8:8a:f5:84:06:ea:87: 76:11:4b:b3:5d:32:44:ab:e6:b8:b0:36:99:af:a2:4b:eb:13: bd:cd:35:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWuOsMwh7cDvUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWE0ZWM0YzctZjg2My00ODM2LThkOWEtMzRmMjZiZDM3ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNbaC6ofslduxurQ8BnXYegnsmCY5iCXAFCG g0f9zX95KIDLGGUVn+rKZLNruafWVun7C4peMeap0RaswpKoDxRV7VoWbN0mu+1p SmUS37x6FbrwgN1XQbCRzsh0mPAu6qucaRnh5KW5vjjW9YIvmC7YmyLx8fYrp7/Q F1eZ4OBQHadHUrkzME+Jjcy0JznOreWEL8c3K0VdMvfje1kQV1cocljXsC2jbyzs riTPuqF3lQ4CsFVXsbSq92RtzgzDMdYtlgFbDsyEczJGPA2p1TBPpMzFfHAW0gwv 0YDtJuWkjusPvln9+WyMN2sutpnv9cu3T3iEeQ7qR/N6lmnApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8ZaneP5jJUwciLE7vuPMH5a+8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzVmMTQ5MzItMDhjMC0z ZmNlLWIyZGEtOTJkMzIwYmNhM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYupkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwYnmGurK+B0qa2jAvajLSRzI+7DsS2Xqb8zK1XqCeD4T9kXS3xPYYU cywxeQrUKjRsPZ5V2eQW0TAuKF0qffLVyj77dLDUt42RiFz6o8qiD053bHc5BfRi Drf9jFECoMiieCmhOj9txa7f2TQwWRhHXLe1L+PyHx64i3sPA26Aho5MU9KrPb8L wJ/eFIwwsUHQQy7d1SSG6XkC4mtMxxsSuGh/fj5aI6igPmrQRWZ2mteKFBhKOzAQ iasaYjQI2aGZIWoexoFT5qArKd/b3W14tJS4VOquWkOqPYJ3um/49qAnuIr1hAbq h3YRS7NdMkSr5riwNpmvokvrE73NNfI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:06:03 2025 by rpki-client